$ rpki-client -vvf rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft File: AfrBm6ETU1D3rq6bWBqFlSisi64.mft (raw, json) Hash identifier: +BqPF9sMdHqI1+b+8E578aSUSUf8bwOQzXx0aO4FHC4= Subject key identifier: 61:2A:28:2A:21:7C:3F:31:19:37:B0:2E:D8:82:B1:B4:C2:54:44:7C Authority key identifier: 01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE Certificate issuer: /CN=A916475C/serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Certificate serial: 34FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft Manifest number: 34E5 Signing time: Sat 18 Oct 2025 14:17:27 +0000 Manifest this update: Sat 18 Oct 2025 14:17:26 +0000 Manifest next update: Sat 25 Oct 2025 14:17:26 +0000 Files and hashes: 1: AfrBm6ETU1D3rq6bWBqFlSisi64.crl (hash: UgEclo8m+1vZPJvSpHf2+SUoyPrYZh2SPT8r/IGSCLk=) 2: 7D512C7EB0C611E5BDBA5065C4F9AE02.roa (hash: hYytIPmZWrKBo2kUKZ6RbyTlKDVjP2KD/kyPVrq80v0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13566 (0x34fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916475C, serialNumber=01FAC19BA1135350F7AEAE9B581A859528AC8BAE Validity Not Before: Oct 18 14:17:26 2025 GMT Not After : Oct 25 14:17:26 2025 GMT Subject: CN=68f3a176-9e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:a2:d4:c2:4b:4d:9d:51:98:5c:42:0e:ba: 04:a3:b3:40:71:65:87:71:5a:66:36:fe:7d:16:cd: 27:ed:78:9f:bd:73:c1:5a:10:e7:cc:5c:62:75:8a: 8a:3c:15:5d:ea:57:99:c1:83:8e:4f:23:90:02:87: b3:52:39:31:ea:09:d3:63:4b:ff:81:41:80:ff:72: 8d:24:14:91:81:5b:8f:fb:76:bd:b0:06:41:7a:32: a5:16:33:a0:52:d9:8d:a4:81:70:be:34:4f:e6:8b: e0:b1:1a:73:dd:18:a1:6b:ac:52:07:67:74:e2:65: ff:b6:67:92:ed:cc:12:89:c3:5d:8c:9b:42:56:e8: af:e8:3f:71:f1:93:0a:85:0b:bf:b3:a7:0d:43:f7: e8:25:e3:bd:55:be:bf:1e:a0:d8:4d:f4:09:d5:ac: 54:a0:4f:c0:31:e5:e4:08:30:15:98:f0:0a:63:53: c1:93:2b:ef:e1:85:84:7c:f1:83:40:23:68:82:d2: df:15:1a:5b:f8:35:37:e4:f8:ae:62:6e:50:37:9b: e0:be:d7:4f:f6:af:8f:a6:dc:b6:37:5a:24:56:ae: 52:12:ff:6a:cc:5d:7a:4f:7c:fb:13:ad:dc:19:86: 75:33:c1:1f:52:bc:72:24:aa:16:a7:1c:c0:b8:16: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:28:2A:21:7C:3F:31:19:37:B0:2E:D8:82:B1:B4:C2:54:44:7C X509v3 Authority Key Identifier: keyid:01:FA:C1:9B:A1:13:53:50:F7:AE:AE:9B:58:1A:85:95:28:AC:8B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfrBm6ETU1D3rq6bWBqFlSisi64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916475C/EAC95FAC1D6B11E2AD800DAC08B02CD2/AfrBm6ETU1D3rq6bWBqFlSisi64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2b:96:6b:e7:b5:e8:68:08:e3:8f:66:4e:d3:28:9a:f7:c9: 56:fa:0c:8e:70:77:89:ad:c9:fd:4b:91:72:e1:83:fd:cd:32: e1:29:b4:0c:f5:79:85:45:78:cc:3d:1e:11:c1:27:0c:a9:dc: 4a:83:40:8f:27:46:d3:fa:b8:52:e6:bb:f5:4d:53:d5:5c:e3: 43:4f:cf:57:d2:13:7f:40:aa:08:ed:68:5d:af:0b:9d:71:52: 32:61:52:56:41:1f:25:e2:44:d7:00:27:d1:cb:14:3f:c3:83: f9:d3:43:b4:70:55:0b:f9:05:7c:05:5f:a9:c1:c3:5a:af:7a: 5f:23:54:cd:9b:8e:03:73:f5:c7:b2:10:ef:d2:29:f8:64:be: 20:46:1a:6f:e9:fe:8c:22:f9:64:ad:37:0b:e5:d7:cd:de:68: 3c:51:3e:39:2e:87:90:3e:7f:94:a2:29:f9:7d:77:87:77:33: c0:be:d4:e4:28:4c:0a:11:ba:9d:3e:14:ab:33:3a:2e:f1:b3: c7:f4:3a:55:93:93:f4:00:4b:85:2c:d8:ed:0e:69:8c:56:aa: d7:df:20:29:66:d3:95:f1:50:91:c4:c5:31:a8:bf:9a:b0:95: 69:de:38:39:af:81:14:95:42:d3:99:5e:a6:fe:ec:67:7c:58: 4e:4a:70:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ3NUMxMTAvBgNVBAUTKDAxRkFDMTlCQTExMzUzNTBGN0FFQUU5QjU4MUE4NTk1 MjhBQzhCQUUwHhcNMjUxMDE4MTQxNzI2WhcNMjUxMDI1MTQxNzI2WjAYMRYwFAYD VQQDEw02OGYzYTE3Ni05ZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGii1MJLTZ1RmFxCDroEo7NAcWWHcVpmNv59Fs0n7XifvXPBWhDnzFxidYqK PBVd6leZwYOOTyOQAoezUjkx6gnTY0v/gUGA/3KNJBSRgVuP+3a9sAZBejKlFjOg UtmNpIFwvjRP5ovgsRpz3Riha6xSB2d04mX/tmeS7cwSicNdjJtCVuiv6D9x8ZMK hQu/s6cNQ/foJeO9Vb6/HqDYTfQJ1axUoE/AMeXkCDAVmPAKY1PBkyvv4YWEfPGD QCNogtLfFRpb+DU35PiuYm5QN5vgvtdP9q+Ppty2N1okVq5SEv9qzF16T3z7E63c GYZ1M8EfUrxyJKoWpxzAuBa6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEqKCoh fD8xGTewLtiCsbTCVER8MB8GA1UdIwQYMBaAFAH6wZuhE1NQ966um1gahZUorIuu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDc1Qy9FQUM5NUZBQzFE NkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUxRDNycTZiV0JxRmxTaXNp NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FmckJtNkVUVTFEM3JxNmJXQnFGbFNpc2k2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDc1Qy9FQUM5NUZBQzFENkIxMUUyQUQ4MDBEQUMwOEIwMkNEMi9BZnJCbTZFVFUx RDNycTZiV0JxRmxTaXNpNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9K5Zr57XoaAjjj2ZO0yia98lW+gyOcHeJrcn9S5Fy4YP9zTLhKbQM 9XmFRXjMPR4RwScMqdxKg0CPJ0bT+rhS5rv1TVPVXONDT89X0hN/QKoI7Whdrwud cVIyYVJWQR8l4kTXACfRyxQ/w4P500O0cFUL+QV8BV+pwcNar3pfI1TNm44Dc/XH shDv0in4ZL4gRhpv6f6MIvlkrTcL5dfN3mg8UT45LoeQPn+Uoin5fXeHdzPAvtTk KEwKEbqdPhSrMzou8bPH9DpVk5P0AEuFLNjtDmmMVqrX3yApZtOV8VCRxMUxqL+a sJVp3jg5r4EUlULTmV6m/uxnfFhOSnBk -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:00 2025 by rpki-client